Oliver, Scott thank you guys for the tips!
This saves a lot of work for me!
Regards,
Cho
On Thu, May 18, 2017 at 9:49 PM, Scott Hardin <[email protected]> wrote:
> Hi Cho,
>
> In case you're not that familiar with Perl... you can use a
> locally-modified copy and put it in a directory that is earlier in the INC
> path to override the standard OpenXPKI classes. Then your copy won't be
> overwritten by the original on the next update, but you'll need to make
> sure your local modifications remain code-compatible.
>
> Used with care, this has been very helpful in some of our customer
> installations for special situations.
>
> Hope this helps,
>
> Scott
>
>
>
> > On May 18, 2017, at 19:28, Oliver Welter <[email protected]> wrote:
> >
> > Hi Cho,
> >
> > not by config, but with a minor change to the class. In the
> CertificateExport.pm file, look around line 45:
> >
> >
> > my $p = {
> > IDENTIFIER => $cert_identifier,
> > FORMAT => $key_format,
> > PASSWORD => $key_password,
> > ALIAS => $alias,
> > };
> >
> > and add "KEEPROOT => 1" to the parameter list. You should make a copy
> of the file and rename it, otherwise it will be overriden by the next
> update.
> >
> > Oli
> >
> >
> > Am 17.05.2017 um 12:14 schrieb Cho Chan:
> >> Hi all,
> >>
> >> when I download private key in pkcs12/jks format -> the generated file
> >> format contains private key, public certs + Issuing/Intermediate CA. Is
> >> there a possibility to include also RootCA inside?
> >>
> >> I found out the following workflow: certificate_privkey_export.yaml
> >> containing the class
> >> OpenXPKI::Server::Workflow::Activity::Tools::CertificateExport which
> >> based on the documentation is supporting parameter template with
> >> chain
> >> An ARRAY of PEM encoded intermediates, might be empty.
> >>
> >> it is written only intermediates, but not Root one... Is there such
> >> possibility and if yes can you please give me some details how to do it?
> >>
> >> Thank you in advance!
> >>
> >> Regards,
> >> Cho
> >>
> >>
> >> ------------------------------------------------------------
> ------------------
> >> Check out the vibrant tech community on one of the world's most
> >> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> >>
> >>
> >>
> >> _______________________________________________
> >> OpenXPKI-users mailing list
> >> [email protected]
> >> https://lists.sourceforge.net/lists/listinfo/openxpki-users
> >>
> >
> >
> > --
> > Protect your environment - close windows and adopt a penguin!
> >
> > ------------------------------------------------------------
> ------------------
> > Check out the vibrant tech community on one of the world's most
> > engaging tech sites, Slashdot.org! http://sdm.link/slashdot______
> _________________________________________
> > OpenXPKI-users mailing list
> > [email protected]
> > https://lists.sourceforge.net/lists/listinfo/openxpki-users
>
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> _______________________________________________
> OpenXPKI-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/openxpki-users
>
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users
